redhat enterprise-mrg CVE-2014-0174 is a vulnerability in Red Hat Enterprise Mrg
Published on July 11, 2014

Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.

Vendor Advisory Vendor Advisory NVD


Products Associated with CVE-2014-0174

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2014-0174 are published in Red Hat Enterprise Mrg:

 

Exploit Probability

EPSS
0.24%
Percentile
46.29%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.